CVE-2026-72385

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference exists in the fprobe fgraph entry() function. The issue occurs because the function performs two separate walks of the per-ip fprobe list under rcu read lock() to size and then fill a shadow-stack reservation. If a fprobe is registered on an active ip between these two walks, the second walk may process an exit handler that was not accounted for during the sizing phase. This can lead to a memory access beyond reserved words or, if no entries were initially counted, cause fgraph data to be NULL, resulting in a fault when write fprobe header() is called.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.